Overview

overview

8

Static

static

6

minecraft-...8a.apk

android-13-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    3s
  • max time network
    303s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    24/10/2026, 04:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    minecraft-26-52-arm64-v8a.apk
  • Size 352.9MB
  • Sample261024-e11x5sfx5v
  • SHA256 b0389408ea16f19e77ac75b75fbd1101d49c7ad7670f1c537b74e3e96726dae7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Hides multimedia files using a .nomedia file 1 TTPs

    Android's media scanner ignores any directory that contains a .nomedia file. This hides your photos, videos, and audio from the gallery and other apps.

    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.mojang.minecraftpe
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    PID:4184

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.mojang.minecraftpe/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 23c35652c38ad782648f2b0e0d56cf78a1cf9e4c244c083deb41771711ea4fb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d43be22324b757701649085bbe98f097f9da72063ab8e2fe1bdb68c33e7d5e41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 f461b148a4df759c0452ad950e1c6b628110f9f602b5a16991f72e4ea7f6554f
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.mojang.minecraftpe/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 73518f8973d1ade30705bc32708a0534b3a76051bcc00126e73d175d8796ac8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1495469562636449368tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation1495469562636449368tmp
        • Size 90B
        • SHA256 8efec973716883df7ee94333a93148d7235233db79ab74d07e51d273d7b5969a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5296259193079243222tmp
        • Path /data/data/com.mojang.minecraftpe/files/PersistedInstallation5296259193079243222tmp
        • Size 569B
        • SHA256 123cda8f96d3a8245d15583582067ce6b043072123b099e60c11375dfd1000ab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        external_servers.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/external_servers.txt
        • Size 383B
        • SHA256 33e15907dc11002171fd7720e6be74b37b67cbc4c2c5cb05e55d2cc9a11ec025
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        options.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/options.txt
        • Size 32B
        • SHA256 5682e4367b106fa65afbf57daac85d3002163bee03ad7218c93db10622169201
        • MD5 SHA1 SHA512
        Submit Download

        pe_world_servers.txt
        • Path /data/data/com.mojang.minecraftpe/games/com.mojang/minecraftpe/pe_world_servers.txt
        • Size 299B
        • SHA256 2dbd0314b63ff96ef1a685aa1462c92c8e75c3883afc0ab76e0ee3f533a88260
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mojang.minecraftpe/oat/x86_64/[email protected]
        • Size 404B
        • SHA256 8f95d75700810f1d8960e2a2ee693d44cfc9a2dc6c99363fbaeb80beaa2e6acd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mojang.minecraftpe/[email protected]
        • Size 8KB
        • SHA256 460af80321f8410e688a8a3975b94c629e78b50f7d170894e41e3005b6b296af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download